Some systems are under maintenance.

Das Kundenverwaltungsportal und die VPS-Verwaltung sind wieder erreichbar. Damit stehen alle Dienste früher als ursprünglich geplant wieder zur Verfügung. Die Lage wird weiterhin aufmerksam beobachtet. Sollte es erforderlich werden, werden umgehend weitere Maßnahmen ergriffen.

The customer management portal and VPS management are available again. All services are therefore back in operation earlier than originally planned. The situation continues to be closely monitored, and further measures will be taken promptly should they become necessary.

22 Oct 2026, 12:45 UTC The update of the systems is proceeding as planned. Concerns about the effectiveness of the security release have largely been resolved. A PHP core developer has confirmed an additional vulnerability, but it is unrelated to the previously announced issues and is not rated as critical. Most internal systems and other public services are back in operation. As no vendor patches are available yet for the regular status page, status updates will continue to be published on this page for the time being. The customer management portal and VPS management will remain offline for now while the situation continues to be monitored. A return to normal operation is planned for Sunday, 25 October 2026.

21 Oct 2026, 15:45 UTC There are indications that the published security release may not fully resolve the vulnerabilities. Until the situation has been clarified, all affected systems, including internal services and the customer management portal, will remain out of operation as a precaution. Further updates will be posted here.

21 Oct 2026, 15:00 UTC The update of the affected systems is proceeding as planned. Parts of the internal infrastructure are already back in operation. The security updates for the customer management portal have been applied. It will be released once the outstanding fixes for the underlying backend components are in place.

20 Oct 2026 The PHP-based public services were shut down as a precaution. VPS are not affected.

The PHP security team has published an unscheduled security release for two critical vulnerabilities, each rated CVSS 9.2. Read the announcement

To protect customer data, the PHP-based public services have been proactively shut down until the patches have been applied and verified. The VPS themselves are not affected and remain online. Only the VPS management interface is temporarily unavailable. Services will then be restored step by step. No definite time can be given at this point.

Appropriate action on customer-managed VPS systems is recommended as well.

In case of emergency: support@eth-services.de

We are currently observing an LACP flap due to a configuration change, which should not have reset the link, causing BGP flaps toward various carriers. The situation is already recovering. We apologize for the inconvenience.

The situation has been confirmed stable from Sparkle NOC and bgp has been reestablished. While RFO is pending, we consider the situation fully resolved.

As per latest update no issues could be found on transport layer from Sparkles transport team. Further investigation are ongoing with JTAC. No ETR is available at the time but no customer impact is observed.

As per the latest update, Sparkle confirmed the issue was due to flaps on transport within FRA metro-ring. Coordination with the transport team is ongoing. Sparkle remains drained until the situation is resolved.

We are currently observing constant route propagation flaps via Sparkle. Traffic has been shifted to other carriers, and a ticket has been opened. We are currently awaiting a response from the Sparkle NOC.